Privacy Policy
This Privacy Policy explains what information Poscally collects, how it's used, how it may be shared, how long it may be retained, and the rights and choices available to users. It applies to the Poscally website, web application, integrations and related services.
1. Introduction
Poscally is a social media management platform operated by 23Labs, a software development and automation business based in Victoria, Australia.
Poscally helps creators, businesses, marketers and agencies plan, schedule, publish and manage social media content across supported social platforms.
This Privacy Policy explains what information we collect, how we use it, how it may be shared, how long it may be retained, and the rights and choices available to users.
This Policy applies to the Poscally website, web application, integrations and related services.
2. Our Role
For information collected directly through Poscally, 23Labs generally acts as the organisation responsible for determining how and why that information is processed.
In some cases, a business or agency may use Poscally to process information on behalf of its own organisation or customers. In those circumstances, the customer may act as the data controller and Poscally may act as a data processor or service provider.
3. Information We Collect
Account Information
We may collect:
- Name
- Email address
- Authentication information
- Time zone
- Preferences
- Workspace information
- Team member details and permissions
- Subscription information
Connected Social Media Accounts
When a user connects a supported social network, Poscally may receive information made available through that platform according to the permissions granted. This may include:
- Display name
- Username or social handle
- Profile image
- Account, page, profile or channel ID
- Authentication and access tokens
- Connected pages or profiles
- Existing or published posts
- Images and videos
- Follower counts
- Engagement information
- Views, impressions and reach
- Likes, comments, shares and clicks
- Analytics and performance data
The exact information available depends on the social network, account type and permissions granted.
User Content
We may process content created, uploaded or scheduled through Poscally, including:
- Captions and text
- Images and videos
- Links and hashtags
- Draft posts and scheduled posts
- Publishing dates and times
- Uploaded media
- Publishing history
Users retain ownership of their User Content.
Payments
Payments and subscriptions are processed through Stripe. Poscally may receive limited payment-related information including:
- Subscription plan
- Billing status
- Transaction amount and date
- Payment status
- Limited payment identifiers
Poscally does not normally store full payment card details.
Technical and Usage Information
We may automatically collect:
- IP address
- Browser type
- Device type
- Operating system
- Approximate location derived from IP address
- Pages viewed and features used
- Login activity
- Dates and times of access
- Application errors and performance information
- Navigation activity
Customer Support
If users contact Poscally, we may collect:
- Contact information
- Message contents and support requests
- Screenshots and files voluntarily provided
- Technical information
- Feedback
4. How We Use Information
We may use information to:
- Create and manage accounts
- Authenticate users
- Connect social media accounts
- Schedule and publish content
- Upload media
- Retrieve authorised social media information
- Provide analytics
- Manage workspaces and teams
- Process subscriptions
- Provide support
- Send account and service communications
- Prevent fraud and abuse
- Protect account security
- Troubleshoot problems and improve performance
- Analyse product usage and develop new functionality
- Comply with legal obligations
- Enforce our policies
Where permitted, Poscally may also send users product updates or marketing communications. Users may unsubscribe from marketing communications at any time.
7. Google and YouTube
If users connect Google or YouTube services, Poscally may use Google and YouTube APIs. Depending on granted permissions, information may include:
- Channel details and channel ID
- Videos and video metadata
- Analytics and engagement information
- Authentication tokens
Users may revoke access through Google account security settings. Use of YouTube through Poscally may also be subject to Google's Privacy Policy and YouTube's Terms of Service.
8. AI-Assisted Features
Poscally may offer AI-assisted features including:
- Caption generation
- Content suggestions
- Rewriting
- Content recommendations
- Performance insights
When a user chooses to use an AI feature, information required to perform that request may be processed through third-party technology providers. Only information reasonably necessary to provide the feature should be submitted.
Social passwords, payment card details and social access tokens must not intentionally be sent as AI prompts. Users remain responsible for reviewing AI-assisted content before publishing it.
10. Service Providers
Poscally currently uses:
Vercel
Used for application hosting, deployment and delivery.
Supabase
Used for database infrastructure, authentication and storage.
Stripe
Used for payments and subscription processing.
CookieYes
Used for cookie consent and preference management.
Google Analytics 4
Used for website traffic, usage and conversion analytics where enabled.
Meta Pixel
Used for advertising measurement and attribution where enabled.
Only information reasonably necessary for each provider to perform its role should be shared. Providers may operate internationally.
12. Data Retention
Information is retained only for as long as reasonably necessary.
While an account remains active, Poscally may retain information required to operate the account and Service.
When an account is deleted, Poscally will take reasonable steps to delete or de-identify associated personal information, subject to:
- Backups
- Legal requirements
- Fraud prevention
- Security requirements
- Accounting and tax requirements
- Payment records
- Disputes
Anonymous or aggregated information that no longer identifies a user may be retained for analytics and product improvement.
13. Security
Poscally uses reasonable administrative and technical measures designed to protect information. These may include:
- Authentication controls
- Restricted access
- Secure credential handling
- Secure social-token handling
- Encryption where appropriate
- Infrastructure monitoring
- Backups
- Security updates
No online service can guarantee absolute security.
14. International Processing
Poscally uses providers that may process or store information in countries outside the user's country. Where applicable privacy laws require international data-transfer protections, appropriate lawful safeguards will be used. See our GDPR & Data Protection page for more detail.
15. Your Rights
Depending on location, users may have rights to:
- Access personal information
- Request correction
- Request deletion
- Request restriction
- Object to certain processing
- Request portability
- Withdraw consent
- Opt out of marketing
- Disconnect social media accounts
- Revoke third-party permissions
Identity verification may be required before certain requests are processed.
16. Children's Privacy
Poscally is designed primarily for creators, marketers, businesses and professional users. Poscally does not knowingly collect personal information from children where doing so would violate applicable law.
17. Changes
This Privacy Policy may be updated as Poscally, its technology, integrations or legal obligations change. The latest update date will always appear at the top of this page.
18. Contact
Poscally
A product of 23Labs
Victoria, Australia
Privacy enquiries: privacy@poscally.com
Related: GDPR & Data Protection, Cookie Policy, Data Deletion, Terms of Service.
5. Social Media Integrations
Poscally may support integrations with platforms such as:
When users connect a social network, they authorise Poscally to exchange information with that platform according to the permissions they approve. Each social network operates under its own privacy policy and terms. Poscally does not control the independent privacy practices of third-party social platforms.
Once content has been published to a third-party social network, deleting it from Poscally does not necessarily remove it from that network. Users may need to delete published content directly through the relevant social platform.